Advisories · Technology

qnabot-on-aws.

Every CVE that names qnabot-on-aws among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105811 CVE record

CVSS 7.1 High

Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
- qnabot-on-aws
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-7191 CVE record

CVSS 8.6 High

Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS
- QnABot on AWS
- Code injection
Not analysed yet 27 Apr 2026